Last updated: February 24, 2025
Maria’s Holdings Corp. (d/b/a Maria’s Italian Kitchen) (the “Company” or “we”) has developed this privacy policy out of respect for the privacy of our customers, visitors to our website, online and mobile ordering customers, Maria’s Kitchen Club loyalty members, gift card purchasers, job applicants, and independent contractors. This policy describes the personal information we collect, use, and disclose about individual consumers, applicants, and contractors who visit or interact with this website, visit any of our restaurant locations, purchase or inquire about any of our products or services, place an online or mobile order, purchase a gift card, join Maria’s Kitchen Club, contract with us to provide services, apply for a position of employment, or otherwise interact or do business with us.
Whenever you visit our website, we will collect some information automatically simply by you visiting and navigating through the site. Additional information may be collected when you voluntarily submit information through forms, place an online order, enroll in Maria’s Kitchen Club, purchase a gift card, request information, or interact with other portions of the website.
This policy does not apply to current or former employees and their dependents or beneficiaries. California residents who are employees or related to employees may request access to the Employee Privacy Policy by emailing help@mariasitaliankitchen.com.
Collection of Personal Information
Based on your transactions and interactions with us, we may collect the following categories of personal information:
- Personal Identifiers (name, date of birth)
- Contact Information (mailing address, email address, phone numbers)
- Account Information (username, password, security credentials)
- Commercial Transaction Data (purchases, gift card purchases, payment information, purchase history)
- Internet Network and Computer Activity
- Geolocation Data
- Mobile Device Data
- Online Portal and Mobile App Usage Information
- Visual and Video Recordings
- Pre-Hire or Pre-Contract Screening Information
- Employment and Education History
- Professional Related Information
- Financial Information for Independent Contractors
- Facility and Systems Access Information
- Medical or Health Information related to public health or food-safety requirements
Some of the personal information described above is classified as Sensitive Personal Information under the CCPA, including: government-issued identification numbers (such as Social Security numbers) collected for tax, payroll, or background-check purposes; account log-in credentials (username and password); and precise geolocation data. We use Sensitive Personal Information only to provide the products and services you request, to comply with legal and tax obligations, for security and fraud-prevention purposes, and for the other business purposes described in this Policy. We do not use or disclose Sensitive Personal Information to infer characteristics about you.
Notice of Financial Incentive: Maria’s Kitchen Club
Maria’s Kitchen Club is our free loyalty program, administered through our Toast point-of-sale and loyalty platform. In exchange for creating an account and allowing us to track your qualifying purchases, members earn points redeemable for discounts and free menu items as described in the program’s full Terms & Conditions.
- Personal information used: contact information, account information, and commercial transaction data
- Value of the information: the value of the personal information collected through this program is reasonably related to the value of the rewards we provide and the cost of administering the program; we do not sell this information
- How to join: enroll online, in our app, or in-store through Toast at any time
- How to leave: you may withdraw from Maria’s Kitchen Club at any time at no cost by emailing help@mariasitaliankitchen.com; unredeemed points will be forfeited upon withdrawal
Sources of Personal Information
We may collect personal information from the following sources:
- Information you provide when submitting forms on our website or social media
- Online and mobile orders placed through our website, mobile app, or Toast ordering platform
- Gift card purchases made through NetMason
- Submissions through our “Contact Us” or customer support form
- In-person interactions at our restaurant locations
- Purchases or inquiries regarding our products or services
- Applications for employment
- Contracts to provide services
- Interactions with employees, contractors, vendors, or other customers
- Cookies and tracking technologies on our website
- Surveillance cameras at our locations
- Career sites and referral sources
- Credit and consumer reporting agencies
- Company-issued computers and systems
- Personal references and former employers
- Educational institutions
- Third-party customer databases, including our Toast and NetMason platforms
Disclosure of Personal Information
We may disclose personal information to the following categories of service providers or partners:
- Financial institutions
- Government agencies
- Toast, our online ordering and loyalty platform provider
- NetMason, our gift card platform provider
- Marketing support and website hosting vendors
- Communication providers for email, SMS, and phone services
- Payment processing vendors
- Data analytics providers
- Social media platforms
- Consumer reporting agencies
- HR and recruiting system providers
- Consulting and investigation firms
- Security and cybersecurity vendors
- Insurance carriers and administrators
Business Purposes for Collecting Personal Information
We collect and disclose personal information for the following purposes:
- Providing products or services requested by you
- Processing, fulfilling, and delivering online and mobile orders
- Processing and fulfilling gift card purchases
- Operating and administering Maria’s Kitchen Club
- Maintaining transaction records
- Managing customer communication preferences
- Responding to customer inquiries
- Communicating updates and service information
- Improving website experience
- Understanding visitor demographics
- Detecting security incidents
- Debugging and repairing website errors
- Preventing fraud and illegal activity
- Verifying consumer requests
- Preventing identity theft
Job Applicant Purposes
If you are under 18 and applying for a position with us, California law may require a parent or guardian to participate in or authorize your application and any related work-permit process. Please involve a parent or guardian when submitting your application.
- Evaluating job applications
- Verifying references and background checks
- Communicating about job candidacy
- Maintaining applicant profiles for future opportunities
- Improving recruiting strategies
- Monitoring activity on company networks
- Supporting mergers, acquisitions, or corporate transactions
- Managing relationships with recruiting vendors
- Improving system functionality
Independent Contractor and Business Purposes
- Complying with tax and regulatory requirements
- Managing contracts and payments
- Granting access to company facilities and systems
- Monitoring security measures on devices
- Managing relationships with vendors and contractors
- Improving company systems and applications
Health and Food Safety Purposes
- Reducing risk of disease transmission
- Protecting consumers and contractors from exposure
- Complying with public health and food-safety regulations
- Facilitating vaccination or prevention programs
- Identifying symptoms and conducting screenings
- Performing contact tracing
- Communicating potential exposure notifications
Sale or Sharing of Personal Information
We do not sell personal information to third parties in exchange for money. We do share certain identifiers and internet activity information (such as cookie and pixel data) with advertising and analytics partners for cross-context behavioral advertising, which is considered “sharing” under the CCPA. You can opt out of this sharing at any time — see “Right to Opt-Out” below.
Right to Opt-Out
California residents have the right to opt-out of the selling or sharing of personal information. You may opt out by:
- Emailing us at help@mariasitaliankitchen.com
- Submitting an online request form
- Using a Global Privacy Control (GPC) browser signal
- Clicking the “Your Privacy Choices” link in the footer of our website
We will treat a Global Privacy Control (GPC) signal from your browser as a valid request to opt out of the sale or sharing of your information for that browser. We do not respond to Do Not Track (DNT) browser signals.
Right to Limit Use of Sensitive Personal Information
California residents have the right to direct us to limit our use of Sensitive Personal Information to what is reasonably necessary to provide the products and services you request. You may submit this request the same way you submit an opt-out request — see “Right to Opt-Out” above.
Retention of Personal Information
We retain personal information according to our internal data retention schedule and applicable legal requirements. Retention periods are determined based on:
- The purpose for which the information was collected
- Applicable legal record-keeping requirements
- Statutes of limitation
- Business needs and regulatory obligations
Use of Cookies and Tracking Technologies
Our website uses cookies and other tracking technologies to improve user experience and analyze website performance.
- Essential cookies required for website operation
- Performance cookies used for analytics
- Functional cookies that store preferences
- Marketing cookies and pixels used for targeted advertising
You may manage cookies through your browser settings.
External Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites.
Third Party Vendors
We may use other companies and individuals to perform certain functions on our behalf, such as administering email communications or facilitating online ordering and loyalty programs. These vendors only have access to the personal information needed to perform their functions and may not use it for any other purpose.
Business Transfers
If we sell or transfer all or part of our business or its assets, personal information may be transferred as part of that transaction.
Compliance with Law and Safety
We may disclose personal information if we believe in good faith that doing so is necessary to comply with the law or to protect the safety of our employees, customers, or the public.
Children’s Privacy
Our website and online ordering platform are general-audience services not directed to children under 13, and we do not knowingly collect personal information from children under 13 without first obtaining verifiable parental consent, as required by the Children’s Online Privacy Protection Act (COPPA). If we learn we have collected personal information from a child under 13 without the required consent, we will delete it as soon as reasonably possible.
For California residents between 13 and 15 years old, we will not share personal information for cross-context behavioral advertising unless the resident has affirmatively authorized us to do so. For residents under 13, we will not share personal information for cross-context behavioral advertising unless a parent or guardian has affirmatively authorized us to do so.
A parent or guardian who believes we may have collected personal information from their child without proper consent may contact us at help@mariasitaliankitchen.com to request that it be reviewed, corrected, or deleted.
How We Protect Your Information
- Separation of automatically collected and voluntarily provided data
- Security tools to prevent unauthorized access
- Restricted internal access to sensitive data
- Encryption of sensitive data
- Access control systems
- Fraud monitoring measures
While we take these precautions seriously, no data transmission over the internet can be guaranteed to be completely secure, and we cannot ensure or warrant the security of any information you transmit to us.
Passwords
Your Maria’s Kitchen Club account can only be accessed using the password associated with it. To protect your information, please do not share your password with others. We will never ask you for your password in an unsolicited phone call or email.
International Visitors
Our services are intended for individuals located within the United States. Users outside the United States should not submit personal information through this website.
Accessibility
We are committed to making this Policy accessible to individuals with disabilities. If you need this Policy in an alternative format, please contact us using the information below.
Notice at Collection
At or before the point we collect personal information from you, we will provide notice of the categories of personal information to be collected and the purposes for which they will be used, as well as whether that information is sold or shared, consistent with this Policy. This notice may be provided through this Policy, a form on our website, or another reasonable method.
California Privacy Rights (CCPA / CPRA)
California residents have the following rights:
- Right to know what personal information we collect
- Right to access personal information, including in a portable and, to the extent technically feasible, readily usable format
- Right to request deletion of personal information
- Right to correct inaccurate personal information
- Right to opt-out of the sale or sharing of personal information
- Right to limit the use and disclosure of Sensitive Personal Information
- Right to designate an authorized agent
- Right to non-discrimination for exercising privacy rights
To submit a request through an authorized agent, the agent must provide written permission signed by you authorizing them to act on your behalf, and we may also contact you directly to verify your identity. We may deny a request from an authorized agent who cannot demonstrate this authorization.
California “Shine the Light” Law
California’s “Shine the Light” law (Civil Code § 1798.83) permits California residents to request information about our disclosure of personal information to third parties for their own direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing purposes.
Submitting Privacy Requests
- Submit an online request: https://mariasitaliankitchen.com/contact-us/
- Email: help@mariasitaliankitchen.com
- Call: (818) 786-4833
- Mail request forms to: 16533 Arminta St., Van Nuys, CA 91406
When you submit a request to know, access, delete, or correct your personal information, we will ask you to provide information that allows us to verify your identity before processing your request. We will confirm receipt of your request within 10 business days and aim to respond within 45 calendar days; if we need more time, we will notify you and may extend our response by up to an additional 45 days. We will act on opt-out requests within 15 days of receipt.
Changes to This Policy
We may update this Privacy Policy from time to time. When changes occur, the updated policy and effective date will be posted on this website. If we plan to use your previously collected personal information in a manner materially different from what we disclosed at the time we collected it, we will notify you by email or another reasonable method, and you will have a choice as to whether we use your information in that different manner.
Questions About This Policy
If you have questions about this Privacy Policy, please contact us:
Maria’s Holdings Corp. (d/b/a Maria’s Italian Kitchen)
Phone: (818) 786-4833
Website: https://mariasitaliankitchen.com